0d91780e68a7fffce02e2ec361eaae2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d91780e68a7fffce02e2ec361eaae2b_JaffaCakes118
Size

3.5MB
MD5

0d91780e68a7fffce02e2ec361eaae2b
SHA1

c911a3ea99b8161e71e3ce99671f9d1960881ec4
SHA256

fae2fbee73fe59c3fe09420c8d3e3744f693fc87c07eef41264e3ec6788b3558
SHA512

38d9a334001dfd2cd02544aaf07db5afacacb66517c08d5fd16aecff8391fc3dc487370411953ab4a810bf22cbe78553bd2fbf8a2061e712d4001aeec70112ae
SSDEEP

98304:x7xDe613QpS3Hxz7yHPjVuuIiAi02LE6fYi0uL/CS35:ne6pQpSFubViKQxixL/Cg5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d91780e68a7fffce02e2ec361eaae2b_JaffaCakes118

Files

0d91780e68a7fffce02e2ec361eaae2b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e9388e4b5bf32299374aec1b66be2603

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CloseHandle
ExitProcess
LCMapStringA
GetCurrentProcess
CreateFileA

user32

CreateWindowExA
CharLowerBuffA
SetWindowLongA
wsprintfA
CloseWindow

advapi32

RegEnumValueA
RegOpenKeyA
RegDeleteValueA
RegSetValueA
RegQueryValueA
RegDeleteKeyA
RegCloseKey
RegCreateKeyA
RegEnumKeyA

Sections

.text
Size: 4KB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ